feat(bomba): add adguard

machines/bomba/networking.nix

@@ -8,6 +8,7 @@
       allowedTCPPorts = [
         22
         25
+        53
         80
         143
         443
@@ -17,6 +18,7 @@
         27015
       ];
       allowedUDPPorts = [
+        53
         80
         443
         34197

machines/bomba/services/adguard.nix

@@ -0,0 +1,18 @@
+{ ... }:
+{
+  services.adguardhome = {
+    enable = true;
+    port = 8017;
+    mutableSettings = true;
+    settings = {
+      dns = {
+        upstream_dns = [
+          "1.1.1.1"
+          "9.9.9.9"
+        ];
+        bind_hosts = [ "192.168.1.223" ];
+        port = 53;
+      };
+    };
+  };
+}

machines/bomba/services/caddy.nix

@@ -83,6 +83,10 @@
         "inventory.patrickcanal.it".extraConfig = ''
           reverse_proxy :${toString config.services.homebox.settings.HBOX_WEB_PORT}
         '';
+        "adguard.patrickcanal.it".extraConfig = ''
+          ${basicAuth}
+          reverse_proxy :${toString config.services.adguardhome.port}
+        '';
       };
     };
 

machines/bomba/services/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./actual.nix
+    ./adguard.nix
     ./caddy.nix
     ./fail2ban.nix
     ./gitea.nix